Date: Mon, 15 Aug 2022 08:18:36 +0900 From: Tatsuki Makino <tatsuki_makino@hotmail.com> To: =?UTF-8?Q?T=c4=b3l_Coosemans?= <tijl@FreeBSD.org> Cc: Andrea Venturoli <ml@netfence.it>, novel@FreeBSD.org, freebsd-ports@freebsd.org Subject: Re: Again on security/gnutls certificate store Message-ID: <PSAPR03MB563911D05F103AABBC0383DEFA699@PSAPR03MB5639.apcprd03.prod.outlook.com> In-Reply-To: <20220813115126.2deda35d@FreeBSD.org> References: <02cb8bc2-8d91-8d58-e764-baab240680bf@netfence.it> <20220813115126.2deda35d@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Hello.
Tijl Coosemans wrote on 2022/08/13 18:51:
> Try this patch for p11-kit. If it works you can file a bug against
> p11-kit, because I believe ports are supposed to move away from
> ca_root_nss.
>
> --- a/security/p11-kit/Makefile
> +++ b/security/p11-kit/Makefile
> @@ -25,7 +25,7 @@ MESON_ARGS= -Dbash_completion=enabled \
> -Dlibffi=enabled \
> -Dnls=false \
> -Dtrust_module=enabled \
> - -Dtrust_paths=${LOCALBASE}/share/certs/ca-root-nss.crt
> + -Dtrust_paths=/etc/ssl/certs
>
> OPTIONS_DEFINE= DOCS MANPAGES TEST
> OPTIONS_SUB= yes
When
./configure --with-trust-paths=/usr/local/share/certs/ca-root-nss.crt:/etc/ssl/certs
is used, TRUST_PATHS is defined as "/usr/local/share/certs/ca-root-nss.crt:/etc/ssl/certs" in ${WRKSRC}/config.h.
When meson, TRUST_PATHS is defined in ${WRKSRC}/_build/config.h as defined by MESON_ARGS=-Dtrust_paths=${LOCALBASE}/share/certs/ca-root-nss.crt:/etc/ssl/certs.
Since these would be the same value, why not just specify multiple paths in meson, separated by a colon?
Also, is there something wrong with omitting ca-root-nss.crt filename, since the directories seem to be handled properly?
Regards.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?PSAPR03MB563911D05F103AABBC0383DEFA699>